Fix RBAC invalid definitions SD-145

saritasa-nest · Sep 13, 2024 · 0e621e8 · 0e621e8
1 parent a872882
commit 0e621e8
Show file tree

Hide file tree

Showing 5 changed files with 7 additions and 7 deletions.
diff --git a/charts/rbac/Chart.yaml b/charts/rbac/Chart.yaml
@@ -6,7 +6,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.1.11
+version: 0.1.12
 
 maintainers:
   - url: https://www.saritasa.com/

diff --git a/charts/rbac/README.md b/charts/rbac/README.md
@@ -31,7 +31,7 @@ saritasa-rbac
 
 ## `chart.version`
 
-![Version: 0.1.11](https://img.shields.io/badge/Version-0.1.11-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square)
+![Version: 0.1.12](https://img.shields.io/badge/Version-0.1.12-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square)
 
 ## Maintainers
 

diff --git a/charts/rbac/templates/client/apps.yaml b/charts/rbac/templates/client/apps.yaml
@@ -26,8 +26,8 @@ rules:
     resources:  ["deployments"]
     verbs: ["get", "patch"]
   - apiGroups: ["tekton.dev"]
-    resources:  ["*"]
-    verbs:  ["taskruns", "pipelineruns", "pipelines", "tasks"]
+    resources:  ["taskruns", "pipelineruns", "pipelines", "tasks"]
+    verbs:  ["get", "list", "watch"]
 
 ---
 kind: RoleBinding

diff --git a/charts/rbac/templates/developers/apps.yaml b/charts/rbac/templates/developers/apps.yaml
@@ -26,8 +26,8 @@ rules:
     resources:  ["deployments"]
     verbs: ["get", "patch"]
   - apiGroups: ["tekton.dev"]
-    resources:  ["*"]
-    verbs:  ["taskruns", "pipelineruns", "pipelines", "tasks"]
+    resources:  ["get", "list", "watch"]
+    verbs:  ["get", "list", "watch"]
 
 ---
 kind: RoleBinding

diff --git a/charts/rbac/values.yaml b/charts/rbac/values.yaml
@@ -28,7 +28,7 @@ extraRbac: ""
   # apiVersion: rbac.authorization.k8s.io/v1
   # metadata:
   #  name: cheesecake-users-readonly-role
-  #  namespace: {{ .Release.Namespace }}
+  #  namespace: {{ .Release.Namespace }}  e
   # rules:
   #   - apiGroups: [""]
   #     resources:  ["services", "pods", "pods/log", "configmaps"]